Q: encryted log

Steve Grubb sgrubb at redhat.com
Mon Nov 26 20:30:28 UTC 2018


On Saturday, November 24, 2018 10:37:41 AM EST Ranran wrote:
> Is there a way to encrypt the auditd logs which are saved to disk?
> The system need to save logs from local into disk (not a remote
> connection), but it should be saved encryped. Is there a way to do it

Typically audit logs are protected by virtue of needing root to read 
anything. An untrusted root user is something Linux isn't designed for. 

-Steve





More information about the Linux-audit mailing list